CVE-2013-2571

State: Published
Severity: Not scored
Published: Jan 28, 2020
Updated: Aug 6, 2024
Reserved: Mar 15, 2013

Description

Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://www.exploit-db.com/exploits/25987
http://www.securityfocus.com/bid/60359
https://exchange.xforce.ibmcloud.com/vulnerabilities/84761
https://packetstormsecurity.com/files/121917/Xpient-POS-Iris-3.8-Cash-Drawer-Operation-Remote-Trigger.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.